Gentoo FoundationMGASA-2013-0347Updated wireshark packages fix multiple vulnerabilities
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
EPSS
Percentile
85.1%
Updated wireshark packages fix security vulnerabilities: The IEEE 802.15.4 dissector could crash (CVE-2013-6336). The NBAP dissector could crash (CVE-2013-6337). The SIP dissector could crash (CVE-2013-6338). The OpenWire dissector could go into a large loop (CVE-2013-6339). The TCP dissector could crash (CVE-2013-6340).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 2 | noarch | wireshark | < 1.8.11-1 | wireshark-1.8.11-1.mga2 |
| Mageia | 3 | noarch | wireshark | < 1.8.11-1 | wireshark-1.8.11-1.mga3 |
References
www.wireshark.org/docs/relnotes/wireshark-1.8.11.html
www.wireshark.org/news/20131101.html
bugs.mageia.org/show_bug.cgi?id=11579
www.wireshark.org/security/wnpa-sec-2013-61.html
www.wireshark.org/security/wnpa-sec-2013-62.html
www.wireshark.org/security/wnpa-sec-2013-63.html
www.wireshark.org/security/wnpa-sec-2013-64.html
www.wireshark.org/security/wnpa-sec-2013-65.html
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
EPSS
Percentile
85.1%